CVE-2018-7795

5.4 mediumEPSS 2.3%

A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic (PM5560 prior to FW version 2.5.4) product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2018-08-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

schneider-electric:powerlogic_pm5560_firmware

References

http://www.securityfocus.com/bid/105170
https://ics-cert.us-cert.gov/advisories/ICSA-18-240-03
https://www.schneider-electric.com/en/download/document/SEVD-2018-228-01/
http://www.securityfocus.com/bid/105170
https://ics-cert.us-cert.gov/advisories/ICSA-18-240-03

Check your stack JSON